From 4cf458aacb9b5b03f51f9b53c58cc9f3bb6c6706 Mon Sep 17 00:00:00 2001
From: Till <till@ktiu.net>
Date: Sun, 18 Jan 2026 00:24:13 +0100
Subject: [PATCH] spam filtering

---
 system/web-server/mail/postfix.nix | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/system/web-server/mail/postfix.nix b/system/web-server/mail/postfix.nix
index bb4ad25..2fe5080 100644
--- a/system/web-server/mail/postfix.nix
+++ b/system/web-server/mail/postfix.nix
@@ -44,6 +44,7 @@ in {
 
 
     enableSubmission = true;
+
     submissionOptions = {
       milter_macro_daemon_name = "ORIGINATING";
       cleanup_service_name = "submission-header-cleanup";
@@ -53,9 +54,8 @@ in {
       smtpd_sasl_path = "/var/run/dovecot2/auth";
       smtpd_sasl_security_options = "noanonymous";
       smtpd_client_restrictions = "permit_mynetworks,permit_sasl_authenticated,reject";
-      smtpd_recipient_restrictions = "reject_non_fqdn_recipient,reject_unknown_recipient_domain,check_recipient_access hash:/etc/postfix/recect-recipients,permit_sasl_authenticated,reject";
+      smtpd_recipient_restrictions = "reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject";
     };
-
     settings = {
 
       main = {
@@ -74,6 +74,7 @@ in {
           "${config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/key.pem"}"
           "${config.security.acme.certs."${config.networking.fqdn}-postfix".directory + "/cert.pem"}"
         ];
+        smtpd_recipient_restrictions = "check_recipient_access hash:/etc/postfix/reject-recipients";
       };
 
       master = {